Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fDZI-zFJDl8HCjKaYBHlfVnZ4HQ.cer
File: fDZI-zFJDl8HCjKaYBHlfVnZ4HQ.cer (raw, json)
Hash identifier: 4ZB3DPFmTPhXCkLlOmxRbD1aU2PJEx+djMa4koRmYPo=
Subject key identifier: 7C:36:48:FB:31:49:0E:5F:07:0A:32:9A:60:11:E5:7D:59:D9:E0:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857167D3CD851A56F89198EB1BB934ED13
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/c2f486-3ac9-48f3-8b7f-5958b3e64d19/1/fDZI-zFJDl8HCjKaYBHlfVnZ4HQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/c2f486-3ac9-48f3-8b7f-5958b3e64d19/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:35:07 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.234.48.0/22
IP: 2a0d:100::/29
Validation: Failed, certificate revoked on Wed 25 Oct 2023 10:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:67:d3:cd:85:1a:56:f8:91:98:eb:1b:b9:34:ed:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c3648fb31490e5f070a329a6011e57d59d9e074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:52:b5:e3:aa:41:89:30:f1:83:22:ae:25:
e5:b1:30:77:09:1a:f5:da:94:17:26:86:17:a8:92:
24:de:09:9d:8e:10:08:24:6d:6c:ad:ef:f2:f6:18:
98:7d:e2:ec:35:cb:e7:03:9f:bf:4b:89:49:01:25:
fe:f5:6a:23:57:f5:95:83:c4:c8:06:f1:8d:fa:f6:
1f:05:1f:0a:97:b7:db:85:45:67:dc:25:12:af:d1:
f6:8f:fd:f5:f0:f2:43:82:85:d8:fc:33:ce:b3:8c:
39:6f:2a:34:82:a4:50:d3:85:25:1b:18:47:58:d9:
8c:9c:7e:a2:a6:c5:2c:64:62:55:df:7d:a4:83:67:
0e:31:80:37:87:77:84:55:32:cf:b0:06:7e:fd:79:
bd:dd:a9:52:ef:33:b3:e6:d0:d5:bb:ab:b1:1a:a2:
dc:09:a6:0f:69:1e:2a:d3:6f:db:62:01:d4:88:dd:
58:eb:dd:a8:c7:b3:c2:aa:8b:c7:31:fc:97:8d:2d:
2d:9c:50:60:56:36:1e:40:45:88:f6:83:de:1a:5b:
a0:b9:6e:5d:5f:ef:3c:16:d8:cc:d6:f1:e6:e1:38:
bd:ab:ac:6d:5d:cd:fa:99:68:87:f5:5e:36:3a:b2:
5e:87:37:25:16:ca:4b:c3:8b:be:5b:16:08:e8:6e:
8a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:36:48:FB:31:49:0E:5F:07:0A:32:9A:60:11:E5:7D:59:D9:E0:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c2f486-3ac9-48f3-8b7f-5958b3e64d19/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c2f486-3ac9-48f3-8b7f-5958b3e64d19/1/fDZI-zFJDl8HCjKaYBHlfVnZ4HQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.48.0/22
IPv6:
2a0d:100::/29
Signature Algorithm: sha256WithRSAEncryption
9b:8e:4a:44:10:e7:15:a9:5b:25:87:ca:6d:49:4f:6b:36:56:
94:e6:c7:21:02:5d:48:d0:2b:fd:80:bf:77:93:f9:5a:27:6b:
55:41:44:15:19:ab:d7:46:66:4b:a3:99:59:95:21:fe:93:b5:
2d:ad:3b:fc:7f:5d:90:8f:41:59:9d:0b:f6:68:90:5f:24:aa:
e3:65:8e:f5:ec:3f:85:e9:b8:56:19:0e:21:1d:de:b6:cb:ae:
a0:5f:6c:34:9d:78:1a:d6:6c:88:58:9a:08:27:ab:3e:1b:e7:
cc:ba:63:f9:0f:0f:a2:6d:09:80:24:6d:9b:ea:72:f1:94:bb:
4b:f4:9b:33:cb:0e:85:45:df:df:ee:19:c4:b2:c1:8f:7a:f5:
b1:2b:58:e0:8e:ea:eb:cc:12:a4:44:39:ab:48:20:2d:00:09:
20:c6:83:db:4b:04:0e:8f:7e:44:eb:d6:ca:d9:cc:c1:c0:eb:
4a:d6:1a:96:0d:09:41:03:f9:bc:96:f4:7b:85:9e:29:60:51:
da:43:c2:c7:90:78:0f:79:8f:8a:19:a4:4b:05:f4:c7:90:b3:
83:2a:3a:e4:e2:26:d2:3a:ea:82:58:e0:f9:e7:a9:4a:cc:e1:
42:11:d6:96:c4:34:2a:3d:f1:09:1d:f5:c1:32:3f:99:0f:64:
ad:c3:9d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:24 2024 by rpki-client on console-fra.rpki-client.org